[ Vendor · 15 CVEs ]
InvoicePlane
CVEs affecting InvoicePlane published in the last 30 days, plus any InvoicePlane CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-100371 | 28 Sep 2026 | CVSS 8.7 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, an authorization guard to… | |
| CVE-2026-100392 | 28 Sep 2026 | CVSS 7.0 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, Users::form() performs no… | |
| CVE-2026-88003 | 25 Sep 2026 | CVSS 7.5 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane fails to revoke… | |
| CVE-2026-85274 | 25 Sep 2026 | CVSS 6.5 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane exposes… | |
| CVE-2026-85289 | 25 Sep 2026 | CVSS 6.5 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane omits… | |
| CVE-2026-85290 | 25 Sep 2026 | CVSS 5.3 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Cron::recur()… | |
| CVE-2026-85291 | 25 Sep 2026 | CVSS 6.5 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's… | |
| CVE-2026-85292 | 25 Sep 2026 | CVSS 4.8 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's User_Controller… | |
| CVE-2026-85293 | 25 Sep 2026 | CVSS 4.8 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2-beta-1, InvoicePlane stores… | |
| CVE-2026-49850 | 25 Sep 2026 | CVSS 7.5 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane exposes… | |
| CVE-2026-50547 | 25 Sep 2026 | CVSS 7.5 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's… | |
| CVE-2026-54790 | 25 Sep 2026 | CVSS 6.0 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores an… | |
| CVE-2026-39353 | 25 Sep 2026 | CVSS 9.1 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2-rc-1, InvoicePlane builds its… | |
| CVE-2026-39372 | 25 Sep 2026 | CVSS 4.9 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves… | |
| CVE-2026-33639 | 25 Sep 2026 | CVSS 7.2 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane interpolates the… |